Go to main page
Versions in this module
v1
Oct 21, 2026
Oct 5, 2026
Jul 7, 2026
May 29, 2026
May 26, 2026
Jan 12, 2026 GO-2026-5853
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Dec 15, 2025 GO-2026-4311 +1 more
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Dec 4, 2025 GO-2026-4311 +1 more
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Nov 19, 2025 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Nov 7, 2025 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Nov 6, 2025 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Apr 24, 2025 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Apr 11, 2025 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Jan 22, 2025 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Oct 9, 2024 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Sep 4, 2024 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Aug 22, 2024 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Aug 15, 2024 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Aug 14, 2024 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Aug 6, 2024 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Jul 10, 2024 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Jul 9, 2024 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Apr 5, 2024 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Feb 28, 2024 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Oct 11, 2023 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Oct 11, 2023 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Oct 9, 2023 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Jul 19, 2023 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Jul 10, 2023 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Jul 8, 2023 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Jun 28, 2023 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
May 3, 2023 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
May 1, 2023 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Mar 27, 2023 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Feb 16, 2023 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Oct 17, 2022 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Oct 7, 2022 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
v0
Sep 30, 2022 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Aug 22, 2022 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Aug 21, 2022 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Jul 25, 2022 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Jul 8, 2022 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Jun 6, 2022 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
May 3, 2022 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Apr 23, 2022 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Apr 6, 2022 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Mar 8, 2022 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio
Jul 26, 2021 GO-2025-4193 +2 more
GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio
GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio
GO-2026-5853: Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage in github.com/sigstore/fulcio